@atumlabs/mppx-atum-escrow 0.1.1 → 0.3.0

package/dist/internal-CjcEyEsm.d.ts

@@ -1,842 +0,0 @@
-import * as z from 'zod/mini';
-import { Challenge, Credential } from 'mppx';
-
-/**
- * A message that has been cryptographically signed to prove authorization.
- * The signature proves you control the wallet that's sending funds.
- *
- */
-type SignedMessage$1 = {
-    /**
-     * The data that was signed. Format depends on the blockchain:
-     * - EVM: Hex-encoded message hash (with 0x prefix)
-     * - Solana: Base64 encoded message
-     * - Tron: Hex-encoded message hash (possibly without 0x prefix)
-     *
-     */
-    message: string;
-    /**
-     * Optional: If 'message' contains a hash, this field contains the original data
-     * before it was hashed. Useful for verification and debugging.
-     *
-     */
-    message_prehash?: string;
-    /**
-     * The cryptographic signature proving you authorized this message.
-     * Format varies by blockchain (hex for EVM/Tron, base58 for Solana).
-     *
-     */
-    signature: string;
-};
-
-interface Logger {
-    debug(obj: unknown, msg?: string): void;
-    info(obj: unknown, msg?: string): void;
-    warn(obj: unknown, msg?: string): void;
-    error(obj: unknown, msg?: string): void;
-    child(bindings: Record<string, unknown>): Logger;
-}
-
-interface Counter {
-    add(value: number, attributes?: Record<string, unknown>): void;
-}
-interface Histogram {
-    record(value: number, attributes?: Record<string, unknown>): void;
-}
-interface InstrumentOptions {
-    description?: string;
-    unit?: string;
-}
-interface Meter {
-    createCounter(name: string, options?: InstrumentOptions): Counter;
-    createHistogram(name: string, options?: InstrumentOptions): Histogram;
-}
-
-/**
- * Resolves the `issued_at` timestamp for a Solana deposit authorization from the
- * cluster's on-chain clock instead of the local wall clock.
- *
- * The escrow validates `now_sec >= issued_at` against Solana's `Clock` sysvar
- * (crates/replay/src/check.rs). That on-chain clock is global consensus and only
- * moves forward, so a value read at build time is a safe lower bound at
- * settlement, which removes the `Escrow_FutureTransaction` failure that a raw
- * `Date.now()` (client wall clock, possibly ahead of the lagging cluster clock)
- * can trigger.
- *
- * The read is best-effort: on any failure, timeout, or unresolved RPC it falls
- * back to `Date.now()` minus a skew buffer, so a flaky public endpoint degrades
- * to the previous behavior rather than blocking the payment.
- */
-
-/** Reads the cluster's on-chain unix timestamp (seconds) from an RPC endpoint. */
-type SolanaClusterUnixTimeReader = (rpcUrl: string, timeoutMs: number) => Promise<bigint>;
-
-/**
- * Chain defaults returned by the payment gateway /defaults endpoint.
- */
-interface ChainDefaults {
-    escrowContract: string;
-    quoteSelector: string;
-    fulfillmentVerifierAccount: string;
-    fulfillmentVerifierEndpoint: string;
-    fulfillmentProxy: string;
-    permit2Contract?: string;
-    /**
-     * V3 Solana escrow domain-separation fields, surfaced by payment-gw
-     * `/defaults` for Solana source chains. Used to build the EscrowDomain that the
-     * V3 deposit hash binds to. Absent for EVM/Tron.
-     */
-    svmSignatureClusterId?: string;
-    svmSignatureDomainVersion?: number;
-}
-
-/** Result of signing a sender_auth message. */
-interface SenderSignature {
-    /** 0x-prefixed signature hex (65-byte secp256k1 for EVM/Tron, 64-byte ed25519 for Solana). */
-    signature: string;
-    /**
-     * base58 signer public key for non-recoverable schemes (Solana), attached to
-     * the signed message's payload.delegate_signer. Absent for EVM/Tron, whose
-     * secp256k1 signatures are recoverable.
-     */
-    delegateSigner?: string;
-}
-/** Signs a single sender_auth signed message for a payment request. */
-interface SenderSigner {
-    sign(signedMessage: SignedMessage$1): Promise<SenderSignature>;
-}
-/** Turnkey provider configuration (shared by the SDK and the CLI env loader). */
-interface TurnkeyConfig {
-    organizationId: string;
-    walletId: string;
-    apiPublicKey: string;
-    apiPrivateKey: string;
-    /**
-     * Chain-native address the signer is expected to resolve to. Verified against
-     * the address Turnkey returns at initialize(); a mismatch fails fast rather
-     * than signing as the wrong depositor.
-     */
-    pinnedAddress?: string;
-    /**
-     * Optional observability threaded to the Turnkey network path (default noop).
-     * SDK consumers can wire their own logger and meter; the CLI leaves them unset.
-     */
-    logger?: Logger;
-    meter?: Meter;
-}
-/** Options selecting a sender-signing provider. Defaults to the private-key provider. */
-type SenderSignerOptions = {
-    provider?: 'raw';
-    privateKey: string;
-    pinnedAddress?: string;
-} | ({
-    provider: 'turnkey';
-} & TurnkeyConfig);
-
-/**
- * This file was automatically generated by json-schema-to-typescript.
- * DO NOT MODIFY IT BY HAND. Instead, modify the source JSONSchema file,
- * and run json-schema-to-typescript to regenerate this file.
- */
-/**
- * The signature method used for authorizing this payment:
- *         - `EVM_PERMIT2`: Gasless token approvals for Ethereum/EVM chains
- *         - `EVM_PERMIT2_ESCROW`: Gasless approvals with escrow support
- *         - `SOLANA`: Standard Solana transaction signatures
- *         - `TRON`: Tron transaction signatures
- *
- * This interface was referenced by `PaymentRequest`'s JSON-Schema
- * via the `definition` "SenderAuthMessageScheme".
- */
-type SenderAuthMessageScheme = "EVM_PERMIT2" | "EVM_PERMIT2_ESCROW" | "SOLANA" | "TRON";
-/**
- * Structured payment request with sender authorization and W3C Verifiable Credentials
- */
-interface PaymentRequest {
-    /**
-     * Semver-shaped declaration version (MAJOR.MINOR). The major component is locked to this schema's parent directory (v1 → major must be 1). Producers MUST emit the canonical value exported by the bindings' Version constant; the canonical bumps on each additive minor evolution.
-     */
-    version: string;
-    /**
-     * Unique identifier for this payment request (used for idempotency)
-     */
-    request_id: string;
-    source: OwnedAsset;
-    /**
-     * Array of destination assets (at least one required)
-     *
-     * @minItems 1
-     */
-    destination: [OwnedAsset, ...OwnedAsset[]];
-    /**
-     * The exact amount to be fulfilled (in the smallest unit, e.g., wei for ETH, cents for USD).
-     */
-    fulfillment_amount: string;
-    /**
-     * The maximum amount willing to be spent from the source (in the smallest unit).
-     */
-    max_source_amount?: string;
-    /**
-     * The deadline for receiving price quotes from settlement providers. After this point in time, no new quotes will be accepted.
-     */
-    quote_deadline: string;
-    /**
-     * The final deadline for completing the payment. If not completed by this time, the payment will be cancelled and eligible for a refund.
-     */
-    fulfillment_deadline: string;
-    /**
-     * Policy requirements for settler authentication. Keys are policy names, values indicate if the policy is required.
-     */
-    settler_auth_required?: {
-        [k: string]: boolean;
-    };
-    sender_auth?: SenderAuth;
-    originator_auth?: VerifiableCredentialAuth1;
-    /**
-     * Ethereum address or public key of a trusted service that will automatically select the best exchange rate for your payment. Leave empty to use the default selector.
-     */
-    quote_selector?: string;
-    /**
-     * Optional third-party service that will independently verify your payment was delivered. Useful for high-value payments or when extra confirmation is needed.
-     */
-    fulfillment_verifier?: {
-        /**
-         * The wallet address or public key of the verification service
-         */
-        account: string;
-        /**
-         * The API endpoint URL where the verification service can be reached
-         */
-        endpoint: string;
-        [k: string]: unknown;
-    };
-    /**
-     * Custom escrow contract address if not using the default. Only needed for advanced use cases.
-     */
-    escrow_contract_address?: string;
-    /**
-     * Contract address on the destination blockchain that will handle the payment delivery. Usually provided by the payment gateway.
-     */
-    fulfillment_proxy?: string;
-    /**
-     * Optional settler filtering requirements. If whitelist is present, only whitelisted settlers may win. If blacklist is present, blacklisted settlers are excluded. Both can be specified; blacklist takes precedence (a settler in both lists is rejected).
-     */
-    settler_requirements?: {
-        /**
-         * List of settler DIDs permitted to fulfill this request. If present and non-empty, only these settlers may win. Use W3C DID format (e.g., did:pkh:eip155:1:0xABC...).
-         *
-         * @minItems 1
-         * @maxItems 100
-         */
-        whitelist?: [string, ...string[]];
-        /**
-         * List of settler DIDs excluded from fulfilling this request. If present and non-empty, these settlers are rejected. Use W3C DID format (e.g., did:pkh:eip155:1:0xABC...).
-         *
-         * @minItems 1
-         * @maxItems 100
-         */
-        blacklist?: [string, ...string[]];
-        [k: string]: unknown;
-    };
-    /**
-     * DEPRECATED: document-level JSON-LD context URLs for the inline VP-style signing envelope (alongside top-level `proof` + `verifiableCredential`). Superseded by the `presentation` field (PaymentRequestEnvelope / PRE), which carries its own self-contained `@context`. Kept for one rollout cycle for back-compat with pre-PRE producers; slated for removal in a future version. Present when the originator wraps the request in a W3C Data Integrity envelope so a downstream verifier can recover the signer identity. Enforcement is operator policy.
-     */
-    "@context"?: string[];
-    proof?: DataIntegrityProof;
-    presentation?: PaymentRequestEnvelope;
-    /**
-     * DEPRECATED: document-level credentials array for the inline VP-style signing envelope (alongside top-level `@context` + `proof`). Superseded by the `presentation` field (PaymentRequestEnvelope / PRE), which carries its credentials inside `presentation.verifiableCredential` under a holder-signed envelope the requester perimeter re-verifies. Kept for one rollout cycle for back-compat; slated for removal in a future version. Array of W3C Verifiable Credentials for identity attestation (e.g., KnownToAtum). Distinct from the single VC carried inside originator_auth.
-     */
-    verifiableCredential?: VerifiableCredential[];
-    [k: string]: unknown;
-}
-/**
- * Represents a cryptocurrency or token in a specific wallet. This tells the system what asset you're sending/receiving and which wallet to use.
- *
- * This interface was referenced by `PaymentRequest`'s JSON-Schema
- * via the `definition` "OwnedAsset".
- */
-interface OwnedAsset {
-    /**
-     * A unique identifier for the asset using CAIP-19 format. CAIP-19 is a standard way to identify blockchain assets: {chain_id}/{asset_namespace}:{asset_reference}. Examples: Ethereum USDC: 'eip155:1/erc20:0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48', Arbitrum USDC: 'eip155:42161/erc20:0xaf88d065e77c8cC2239327C5EDb3A432268e5831', Solana USDC: 'solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp/token:EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v', Tron USDT: 'tron:mainnet/trc20:TR7NHqjeKQxGTCi8q8ZY4pL8otSzgjLj6t'
-     */
-    asset_identifier: string;
-    /**
-     * The wallet address that owns this asset. Format depends on the blockchain: Ethereum/EVM: 0x-prefixed hex address (42 characters), Solana: Base58 encoded address, Tron: T-prefixed Base58 address
-     */
-    account: string;
-    [k: string]: unknown;
-}
-/**
- * Authorization from the asset owner to execute the payment. The exact format depends on the source blockchain's authorization mechanism.
- *
- * This interface was referenced by `PaymentRequest`'s JSON-Schema
- * via the `definition` "SenderAuth".
- */
-interface SenderAuth {
-    verifiable_credential?: VerifiableCredentialAuth;
-    message_scheme: SenderAuthMessageScheme;
-    /**
-     * Array of signed messages (at least one required)
-     *
-     * @minItems 1
-     */
-    signed_messages: [SignedMessage, ...SignedMessage[]];
-    [k: string]: unknown;
-}
-/**
- * @deprecated
- * DEPRECATED: inner-document credential carrier. Credentials MUST ride ONLY in the holder-signed PaymentRequestEnvelope (PRE); the inner PaymentRequest carries no credential and its Data Integrity signature EXCLUDES this field (stripped before canonicalization on both producer and verifier). Populated only for one back-compat rollout cycle, then removed.
- */
-interface VerifiableCredentialAuth {
-    verifiable_credential: VerifiableCredential;
-    /**
-     * Reference to verification method from the DID Document
-     */
-    verification_method_id: string;
-    /**
-     * Cryptographic signature matching the verification method type
-     */
-    signature: string;
-    [k: string]: unknown;
-}
-/**
- * W3C Verifiable Credential structure conforming to the W3C Verifiable Credentials Data Model v1.1
- *
- * This interface was referenced by `PaymentRequest`'s JSON-Schema
- * via the `definition` "VerifiableCredential".
- */
-interface VerifiableCredential {
-    /**
-     * JSON-LD context array, must include 'https://www.w3.org/2018/credentials/v1'
-     */
-    "@context": string[];
-    /**
-     * Unique identifier for this credential
-     */
-    id: string;
-    /**
-     * Credential types, must include 'VerifiableCredential'
-     */
-    type: string[];
-    /**
-     * DID or issuer object of the credential issuer
-     */
-    issuer: string | {
-        [k: string]: unknown;
-    };
-    /**
-     * When the credential was issued
-     */
-    issuanceDate: string;
-    /**
-     * When the credential expires
-     */
-    expirationDate?: string;
-    /**
-     * Claims about the credential subject (structure varies by issuer)
-     */
-    credentialSubject: {
-        [k: string]: unknown;
-    };
-    /**
-     * Information for credential revocation checking
-     */
-    credentialStatus?: {
-        [k: string]: unknown;
-    };
-    /**
-     * Cryptographic proof of credential integrity
-     */
-    proof: {
-        [k: string]: unknown;
-    };
-    [k: string]: unknown;
-}
-/**
- * A message that has been cryptographically signed to prove authorization. The signature proves you control the wallet that's sending funds.
- *
- * This interface was referenced by `PaymentRequest`'s JSON-Schema
- * via the `definition` "SignedMessage".
- */
-interface SignedMessage {
-    /**
-     * The data that was signed. Format depends on the blockchain:
-     *             - EVM: Hex-encoded message hash (with 0x prefix)
-     *             - Solana: Hex-encoded message hash (with 0x prefix)
-     *             - Tron: Hex-encoded message hash (possibly without 0x prefix)
-     */
-    message: string;
-    /**
-     * Optional: If 'message' contains a hash, this field contains the original data before it was hashed. Useful for verification and debugging.
-     */
-    message_prehash?: string;
-    /**
-     * The cryptographic signature proving you authorized this message. Format varies by blockchain (hex for EVM/Tron, base58 for Solana).
-     */
-    signature: string;
-    /**
-     * Optional chain-specific payload containing additional signing context (e.g., delegate_signer for Solana). Preserved through the pipeline for downstream consumers.
-     */
-    payload?: {
-        [k: string]: unknown;
-    };
-    [k: string]: unknown;
-}
-/**
- * DEPRECATED: legacy bare-signature carrier for a single issuer-signed VC about the originator. Superseded by the `presentation` field (PaymentRequestEnvelope / PRE), which carries the originator's credentials inside a holder-signed W3C VerifiablePresentation envelope that the requester perimeter re-verifies. Kept populated alongside `presentation` for one rollout cycle; slated for removal in a future version. New producers SHOULD emit `presentation` and treat this field as read-only fallback.
- */
-interface VerifiableCredentialAuth1 {
-    verifiable_credential: VerifiableCredential;
-    /**
-     * Reference to verification method from the DID Document
-     */
-    verification_method_id: string;
-    /**
-     * Cryptographic signature matching the verification method type
-     */
-    signature: string;
-    [k: string]: unknown;
-}
-/**
- * DEPRECATED: document-level W3C Data Integrity proof for the inline VP-style signing envelope (alongside top-level `@context` + `verifiableCredential`). Superseded by the `presentation` field (PaymentRequestEnvelope / PRE), whose holder-signed proof binds challenge=request_hash (content hash of the request) and domain=did:web:<env>.atum.network and is re-verified by the requester perimeter. Kept for one rollout cycle for back-compat; slated for removal in a future version. When present, attests that the document was emitted by the signer identified in proof.verificationMethod. Distinct from sender_auth (which authorizes the on-chain transfer) and originator_auth (the legacy single-VC carrier).
- */
-interface DataIntegrityProof {
-    /**
-     * Proof type identifier (e.g., EcdsaSecp256k1RecoverySignature2020)
-     */
-    type: string;
-    /**
-     * ISO 8601 timestamp when the proof was created
-     */
-    created: string;
-    /**
-     * DID URL identifying the verification method (e.g., did:pkh:eip155:1:0x...#blockchainAccountId)
-     */
-    verificationMethod: string;
-    /**
-     * Purpose of the proof (e.g., assertionMethod, authentication)
-     */
-    proofPurpose: string;
-    /**
-     * Detached JWS signature (header..signature format for ES256K-R)
-     */
-    jws?: string;
-    /**
-     * Alternative to jws: base-encoded proof value
-     */
-    proofValue?: string;
-    [k: string]: unknown;
-}
-/**
- * Optional originator-side W3C VerifiablePresentation envelope (PaymentRequestEnvelope) carrying issuer-signed credentials about the originator, holder-signed under proofPurpose 'authentication' with proof.challenge bound to request_hash (content hash of the request) and proof.domain bound to the network-wide did:web:<env>.atum.network. Additive + back-compat: older requests omit it. The requester perimeter (payment-gw) re-verifies it before persisting; the holder MUST equal the recovered signer of the inner PaymentRequest proof. Mirror of the settler-side FulfillmentQuoteEnvelope. Distinct from originator_auth (legacy bare-signature VC carrier kept populated alongside this for one rollout cycle) and from the document-level verifiableCredential array.
- */
-interface PaymentRequestEnvelope {
-    /**
-     * Semver-shaped declaration version (MAJOR.MINOR) of the PaymentRequestEnvelope declaration.
-     */
-    version?: string;
-    /**
-     * JSON-LD context array. MUST include BOTH the W3C VC v1 context and the PaymentRequestEnvelope v1 context, or JSON-LD expansion drops envelope-specific terms (challenge, domain, holder) during URDNA2015 canonicalization.
-     */
-    "@context": string[];
-    /**
-     * MUST contain 'VerifiablePresentation' per W3C VC Data Model v1.1.
-     */
-    type: string[];
-    /**
-     * did:pkh URI of the originator presenting the credentials. The verifier asserts holder equals the recovered signer of the inner PaymentRequest.
-     */
-    holder: string;
-    /**
-     * Array of issuer-signed credentials about the originator. One VC per concern (psp-role / KYC / jurisdiction) per the locked design.
-     *
-     * @minItems 1
-     * @maxItems 16
-     */
-    verifiableCredential: [VerifiableCredential] | [VerifiableCredential, VerifiableCredential] | [VerifiableCredential, VerifiableCredential, VerifiableCredential] | [VerifiableCredential, VerifiableCredential, VerifiableCredential, VerifiableCredential] | [VerifiableCredential, VerifiableCredential, VerifiableCredential, VerifiableCredential, VerifiableCredential] | [
-        VerifiableCredential,
-        VerifiableCredential,
-        VerifiableCredential,
-        VerifiableCredential,
-        VerifiableCredential,
-        VerifiableCredential
-    ] | [
-        VerifiableCredential,
-        VerifiableCredential,
-        VerifiableCredential,
-        VerifiableCredential,
-        VerifiableCredential,
-        VerifiableCredential,
-        VerifiableCredential
-    ] | [
-        VerifiableCredential,
-        VerifiableCredential,
-        VerifiableCredential,
-        VerifiableCredential,
-        VerifiableCredential,
-        VerifiableCredential,
-        VerifiableCredential,
-        VerifiableCredential
-    ] | [
-        VerifiableCredential,
-        VerifiableCredential,
-        VerifiableCredential,
-        VerifiableCredential,
-        VerifiableCredential,
-        VerifiableCredential,
-        VerifiableCredential,
-        VerifiableCredential,
-        VerifiableCredential
-    ] | [
-        VerifiableCredential,
-        VerifiableCredential,
-        VerifiableCredential,
-        VerifiableCredential,
-        VerifiableCredential,
-        VerifiableCredential,
-        VerifiableCredential,
-        VerifiableCredential,
-        VerifiableCredential,
-        VerifiableCredential
-    ] | [
-        VerifiableCredential,
-        VerifiableCredential,
-        VerifiableCredential,
-        VerifiableCredential,
-        VerifiableCredential,
-        VerifiableCredential,
-        VerifiableCredential,
-        VerifiableCredential,
-        VerifiableCredential,
-        VerifiableCredential,
-        VerifiableCredential
-    ] | [
-        VerifiableCredential,
-        VerifiableCredential,
-        VerifiableCredential,
-        VerifiableCredential,
-        VerifiableCredential,
-        VerifiableCredential,
-        VerifiableCredential,
-        VerifiableCredential,
-        VerifiableCredential,
-        VerifiableCredential,
-        VerifiableCredential,
-        VerifiableCredential
-    ] | [
-        VerifiableCredential,
-        VerifiableCredential,
-        VerifiableCredential,
-        VerifiableCredential,
-        VerifiableCredential,
-        VerifiableCredential,
-        VerifiableCredential,
-        VerifiableCredential,
-        VerifiableCredential,
-        VerifiableCredential,
-        VerifiableCredential,
-        VerifiableCredential,
-        VerifiableCredential
-    ] | [
-        VerifiableCredential,
-        VerifiableCredential,
-        VerifiableCredential,
-        VerifiableCredential,
-        VerifiableCredential,
-        VerifiableCredential,
-        VerifiableCredential,
-        VerifiableCredential,
-        VerifiableCredential,
-        VerifiableCredential,
-        VerifiableCredential,
-        VerifiableCredential,
-        VerifiableCredential,
-        VerifiableCredential
-    ] | [
-        VerifiableCredential,
-        VerifiableCredential,
-        VerifiableCredential,
-        VerifiableCredential,
-        VerifiableCredential,
-        VerifiableCredential,
-        VerifiableCredential,
-        VerifiableCredential,
-        VerifiableCredential,
-        VerifiableCredential,
-        VerifiableCredential,
-        VerifiableCredential,
-        VerifiableCredential,
-        VerifiableCredential,
-        VerifiableCredential
-    ] | [
-        VerifiableCredential,
-        VerifiableCredential,
-        VerifiableCredential,
-        VerifiableCredential,
-        VerifiableCredential,
-        VerifiableCredential,
-        VerifiableCredential,
-        VerifiableCredential,
-        VerifiableCredential,
-        VerifiableCredential,
-        VerifiableCredential,
-        VerifiableCredential,
-        VerifiableCredential,
-        VerifiableCredential,
-        VerifiableCredential,
-        VerifiableCredential
-    ];
-    proof: VPDataIntegrityProof;
-    [k: string]: unknown;
-}
-/**
- * Holder-signed W3C Data Integrity proof. proofPurpose MUST be 'authentication'; challenge MUST equal request_hash (the content hash of the inner PaymentRequest); domain MUST equal the network-wide did:web:<env>.atum.network.
- */
-interface VPDataIntegrityProof {
-    /**
-     * Proof type identifier. MUST be one of EcdsaSecp256k1RecoverySignature2020 (secp256k1) or Ed25519Signature2020 (ed25519).
-     */
-    type: string;
-    /**
-     * ISO 8601 timestamp when the proof was created.
-     */
-    created: string;
-    /**
-     * DID URL identifying the verification method (e.g., did:pkh:eip155:1:0x...#blockchainAccountId). The recovered identity MUST match the holder field.
-     */
-    verificationMethod: string;
-    /**
-     * Always 'authentication' for VerifiablePresentation proofs per W3C VC Data Model §5.6.
-     */
-    proofPurpose: "authentication";
-    /**
-     * Replay-binding challenge. The verifier requires this to equal request_id (originator-side correlation id).
-     */
-    challenge: string;
-    /**
-     * Replay-binding domain. The verifier requires this to equal the network-wide did:web:<env>.atum.network.
-     */
-    domain: string;
-    /**
-     * Detached JWS signature in header..signature format. Used by the EcdsaSecp256k1RecoverySignature2020 cryptosuite.
-     */
-    jws?: string;
-    /**
-     * Multibase z-base58btc-encoded 64-byte signature. Used by the Ed25519Signature2020 cryptosuite.
-     */
-    proofValue?: string;
-    [k: string]: unknown;
-}
-
-/**
- * This file was automatically generated by json-schema-to-typescript.
- * DO NOT MODIFY IT BY HAND. Instead, modify the source JSONSchema file,
- * and run json-schema-to-typescript to regenerate this file.
- */
-/**
- * The MPP `charge` challenge request — the method-specific `request` blob inside an mppx Challenge. It carries the source option the payer funds from plus the destination/corridor block (the reused `extra`). MPP has no x402 `accepts[]` envelope, so the source option that x402 carried at the `accepts[]` top level rides here alongside `extra`. One source option per challenge; a 402 may advertise several challenges to offer several source options.
- */
-interface AtumEscrowRequest {
-    /**
-     * The source chain/token/cap the payer funds from.
-     */
-    source: {
-        /**
-         * CAIP-2 source chain id (e.g. eip155:8453).
-         */
-        network: string;
-        /**
-         * Source token address (EVM hex or base58).
-         */
-        asset: string;
-        /**
-         * Source spend cap (fulfillmentAmount + markup), in atomic token units — the authoritative `max_source_amount` the payer signs.
-         */
-        amount: string;
-    };
-    extra: AtumEscrowExtra;
-}
-/**
- * The `extra.atum` object carried inside an atum-escrow x402 PaymentRequirements entry (accepts[]): the merchant's receive-side plus the contract/role addresses and deadline budgets. Scheme-specific data the standard x402 `extra` bag treats as opaque, so it is owned here and shared by all role mechanisms. Addresses are chain-general: an EVM `0x`-prefixed hex address, or a Tron/Solana base58 address, depending on the source/destination chain.
- */
-interface AtumEscrowExtra {
-    /**
-     * Where the merchant receives (CAIP-2 chain, token, account).
-     */
-    destination: {
-        /**
-         * CAIP-2 destination chain id (e.g. eip155:42161).
-         */
-        network: string;
-        /**
-         * Destination token address (EVM hex or base58).
-         */
-        asset: string;
-        /**
-         * Merchant receive account (EVM hex or base58).
-         */
-        account: string;
-    };
-    /**
-     * Exact amount the merchant receives, in atomic token units.
-     */
-    fulfillmentAmount: string;
-    /**
-     * Source-chain escrow contract (the x402 payTo).
-     */
-    escrow: string;
-    /**
-     * Destination-chain fulfillment proxy contract.
-     */
-    fulfillmentProxy: string;
-    /**
-     * Reserver role address (escrow deposit witness).
-     */
-    reserver: string;
-    /**
-     * Releaser role address (escrow deposit witness).
-     */
-    releaser: string;
-    /**
-     * Source-chain fulfillment-verifier endpoint the payment request carries. The verifier account and the quote selector are the releaser and reserver respectively, so only the endpoint is not otherwise present in this object.
-     */
-    fulfillmentVerifierEndpoint: string;
-    /**
-     * Recommended quote-deadline budget in seconds, relative to signing time.
-     */
-    quoteDeadlineSeconds: number;
-    /**
-     * Recommended fulfillment-deadline budget in seconds, relative to signing time.
-     */
-    fulfillmentDeadlineSeconds: number;
-    /**
-     * Tron-only: the Permit2 contract address the deposit authorization is signed against (the TIP-712 verifying contract). Present only when the source chain is Tron; on EVM the canonical Permit2 address is well-known, and Solana does not use Permit2.
-     */
-    permit2?: string;
-    /**
-     * Solana-only: cluster identifier used to domain-separate the deposit authorization. Present only when the source chain is Solana; omitted for EVM/Tron.
-     */
-    svmSignatureClusterId?: string;
-    /**
-     * Solana-only: signature domain version used to domain-separate the deposit authorization. Present only when the source chain is Solana; omitted for EVM/Tron.
-     */
-    svmSignatureDomainVersion?: number;
-}
-
-/**
- * Shared internals for the Atum escrow MPP method: the wire schemas, the method
- * definition, the shared types, and the pure chain/address helpers used by both
- * the payer ({@link ./client}) and merchant ({@link ./server}) sides.
- *
- * This module is not a public entry point — consumers import from the package
- * root, `/client`, or `/server`. The helpers here are exported only so the
- * client and server modules can share them.
- *
- * @internal
- */
-
-/** The method name advertised in MPP challenges and credentials. */
-declare const METHOD_NAME = "atum-escrow";
-/** The MPP intent this method implements. */
-declare const INTENT = "charge";
-/**
- * Schema for the `charge` challenge request — the method-specific data a merchant
- * publishes in an MPP `402` challenge. It describes what the merchant receives and the
- * source option the payer may fund from, so the payer can build the payment offline.
- */
-declare const ChargeRequestSchema: z.ZodMiniObject<{
-    source: z.ZodMiniObject<{
-        network: z.ZodMiniString<string>;
-        asset: z.ZodMiniString<string>;
-        amount: z.ZodMiniString<string>;
-    }, z.core.$strip>;
-    extra: z.ZodMiniObject<{
-        destination: z.ZodMiniObject<{
-            network: z.ZodMiniString<string>;
-            asset: z.ZodMiniString<string>;
-            account: z.ZodMiniString<string>;
-        }, z.core.$strip>;
-        fulfillmentAmount: z.ZodMiniString<string>;
-        escrow: z.ZodMiniString<string>;
-        fulfillmentProxy: z.ZodMiniString<string>;
-        reserver: z.ZodMiniString<string>;
-        releaser: z.ZodMiniString<string>;
-        fulfillmentVerifierEndpoint: z.ZodMiniString<string>;
-        quoteDeadlineSeconds: z.ZodMiniNumber<number>;
-        fulfillmentDeadlineSeconds: z.ZodMiniNumber<number>;
-        permit2: z.ZodMiniOptional<z.ZodMiniString<string>>;
-        svmSignatureClusterId: z.ZodMiniOptional<z.ZodMiniString<string>>;
-        svmSignatureDomainVersion: z.ZodMiniOptional<z.ZodMiniNumber<number>>;
-    }, z.core.$strip>;
-}, z.core.$strip>;
-/**
- * Schema for the `charge` credential payload — the signed payment the payer returns in
- * the MPP credential. It carries the Atum payment request; the request's signatures and
- * terms are verified in full during server verification and by the Atum Payment Gateway,
- * so this envelope validates only that the request is present.
- */
-declare const CredentialPayloadSchema: z.ZodMiniObject<{
-    paymentRequest: z.ZodMiniRecord<z.ZodMiniString<string>, z.ZodMiniUnknown>;
-}, z.core.$strip>;
-/**
- * The `charge` challenge request — the canonical `AtumEscrowRequest` shape (source option
- * + the destination/corridor `extra`). The runtime schema above is verified against this
- * type at compile time (below), so the validator and the canonical schema cannot drift.
- */
-type ChargeRequest = AtumEscrowRequest;
-/** The `charge` credential payload, carrying the signed Atum payment request. */
-interface ChargeCredentialPayload {
-    /** The signed Atum payment request: source/destination, amounts, and authorizations. */
-    paymentRequest: PaymentRequest;
-}
-/**
- * The MPP challenge for this method. Uses the schema's inferred type for the request
- * (equal to {@link ChargeRequest} by the compile-time guard above, and compatible with
- * the framework's `Record<string, unknown>` request constraint).
- */
-type AtumEscrowChallenge = Challenge.Challenge<z.infer<typeof ChargeRequestSchema>, "charge", "atum-escrow">;
-/** The MPP credential for this method. */
-type AtumEscrowCredential = Credential.Credential<ChargeCredentialPayload, AtumEscrowChallenge>;
-/**
- * The base `atum-escrow` charge method. Extend it with `registerClient` on the payer side
- * and `registerServer` on the merchant side.
- */
-declare const atumEscrowChargeMethod: {
-    readonly name: "atum-escrow";
-    readonly intent: "charge";
-    readonly schema: {
-        readonly request: z.ZodMiniObject<{
-            source: z.ZodMiniObject<{
-                network: z.ZodMiniString<string>;
-                asset: z.ZodMiniString<string>;
-                amount: z.ZodMiniString<string>;
-            }, z.core.$strip>;
-            extra: z.ZodMiniObject<{
-                destination: z.ZodMiniObject<{
-                    network: z.ZodMiniString<string>;
-                    asset: z.ZodMiniString<string>;
-                    account: z.ZodMiniString<string>;
-                }, z.core.$strip>;
-                fulfillmentAmount: z.ZodMiniString<string>;
-                escrow: z.ZodMiniString<string>;
-                fulfillmentProxy: z.ZodMiniString<string>;
-                reserver: z.ZodMiniString<string>;
-                releaser: z.ZodMiniString<string>;
-                fulfillmentVerifierEndpoint: z.ZodMiniString<string>;
-                quoteDeadlineSeconds: z.ZodMiniNumber<number>;
-                fulfillmentDeadlineSeconds: z.ZodMiniNumber<number>;
-                permit2: z.ZodMiniOptional<z.ZodMiniString<string>>;
-                svmSignatureClusterId: z.ZodMiniOptional<z.ZodMiniString<string>>;
-                svmSignatureDomainVersion: z.ZodMiniOptional<z.ZodMiniNumber<number>>;
-            }, z.core.$strip>;
-        }, z.core.$strip>;
-        readonly credential: {
-            readonly payload: z.ZodMiniObject<{
-                paymentRequest: z.ZodMiniRecord<z.ZodMiniString<string>, z.ZodMiniUnknown>;
-            }, z.core.$strip>;
-        };
-    };
-};
-
-export { type AtumEscrowChallenge as A, type ChargeCredentialPayload as C, INTENT as I, METHOD_NAME as M, type PaymentRequest as P, type SenderSigner as S, type AtumEscrowCredential as a, type AtumEscrowRequest as b, type ChargeRequest as c, ChargeRequestSchema as d, CredentialPayloadSchema as e, type SenderSignerOptions as f, atumEscrowChargeMethod as g, type SolanaClusterUnixTimeReader as h, type ChainDefaults as i };